feat(COD-5174): only store the findings on push (#224)

Author: jeremydubreil

action.yaml

@@ -7,7 +7,7 @@ inputs:
     required: false
     default: '.'
   target:
-    description: 'One of old or new to represent which is being analyzed'
+    description: 'One of push, old or new to represent which is being analyzed'
     required: false
   debug:
     description: 'Set to true to enable debug logging'

src/index.ts

@@ -51,7 +51,6 @@ async function runAnalysis() {
     'sca',
     'scan',
     '.',
-    '--save-results',
     '-o',
     scaDir,
     '--formats',
@@ -61,6 +60,9 @@ async function runAnalysis() {
     '--keyring',
     trustedKeys,
   ]
+  if (target === 'push') {
+    args.push('--save-results')
+  }
   if (indirectDeps.toLowerCase() === 'false') {
     args.push('--eval-direct-only')
   }